Compliance Lead

<div class="content-intro"><h3><strong>About Aegis Ventures</strong></h3>

<p><strong><a href=" Ventures</a></strong> partners with entrepreneurs and industry leaders to launch and scale transformative companies in digital health and artificial intelligence. Our platform brings together market-shaping ideas, growth capital, and ambitious individuals to solve major societal problems. With a focus on innovations in healthcare, Aegis has launched four successful portfolio companies in partnership with Northwell Health and recently announced the Digital Consortium to co-develop, invest in, and launch new companies.</p></div><hr>

<h3><strong>About the Company</strong></h3>

<p><a href=" Imaging</strong></a>'s mission is to unlock clinical data to overcome previously impossible medical challenges, bringing hope and medical breakthroughs that transform patient lives. Avandra is poised to revolutionize healthcare research and innovation by creating the largest indexed data cloud of medical imaging. This platform will unlock unprecedented access to real-world imaging data, essential for biopharma research, medical device innovation, AI model training, and improved patient care. </p>

<p>Leveraging its strategic acquisitions, Avandra aims to aggregate and de-identify vast amounts of imaging data, providing frictionless access to this invaluable resource. With a national footprint of over 5,000 customer integrations and a market share of approximately 70%, this robust infrastructure supports their core business, ensuring continued growth and cash flow to fuel their innovative data cloud platform.</p>

<h3><strong>About the Job</strong></h3>

<p><span data-contrast="auto">As our<strong> Compliance Lead</strong>, you'll own and operationalize our compliance program — turning our regulatory obligations into a scalable, audit-ready system that earns the trust of health systems, investors, and the patients behind the data.</span><span data-ccp-props="{"335559739":120}"> <span data-contrast="auto">Avandra handles protected health information across a growing network of health system partners. </span></span></p>

<p><span data-contrast="auto">This is a build role. You'll work alongside our IT & Security Manager, contributing to security posture while owning the compliance workstream end-to-end. If you're energized by standing up programs — not just maintaining them — this is your role.</span><span data-ccp-props="{"335559739":120}"> </span></p>

<h3><strong>What You’ll Do</strong></h3>

<p><strong><span data-contrast="none">Compliance Program Management</span></strong><span data-ccp-props="{"335559738":200,"335559739":80}"> </span></p>

<ul>

<li><span data-contrast="auto">Own Avandra's compliance roadmap across HIPAA, HITRUST, and SOC 2; drive certification timelines and recertification cycles.</span><span data-ccp-props="{"335559739":80}"> </span></li>

<li><span data-contrast="auto">Maintain the risk register and conduct company-wide risk assessments on a defined cadence.</span></li>

<li><span data-contrast="auto">Author, publish, and maintain security and compliance policies and procedures.</span></li>

<li><span data-contrast="auto">Evaluate emerging frameworks (ISO 27001, NIST CSF) for relevance as we scale.</span></li>

</ul>

<p><strong><span data-contrast="none">Audit & Evidence Readiness</span></strong><span data-ccp-props="{"335559738":200,"335559739":80}"> </span></p>

<ul>

<li><span data-contrast="auto">Coordinate evidence collection, gap assessments, and control testing across Engineering, Operations, and People teams.</span></li>

<li><span data-contrast="auto">Manage audit relationships with external assessors and compliance-automation platforms.</span></li>

<li><span data-contrast="auto">Maintain audit-ready documentation at all times — not just at audit season.</span></li>

</ul>

<p><strong><span data-contrast="none">Vendor Risk Management</span></strong><span data-ccp-props="{"335559738":200,"335559739":80}"> </span></p>

<ul>

<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="8" data-aria-level="1"><span data-contrast="auto">Own the vendor security intake and assessment process.</span></li>

<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="9" data-aria-level="1"><span data-contrast="auto">Respond to customer security questionnaires, RFPs, and due diligence requests; represent Avandra'scompliance posture credibly to health system partners.</span></li>

</ul>

<p><strong><span data-contrast="none">M&A Compliance Integration</span></strong><span data-ccp-props="{"335559738":200,"335559739":80}"> </span></p>

<ul>

<li><span data-contrast="auto">Conduct compliance assessments for acquisition targets — evaluate PHI handling practices, existing certifications, policy maturity, and open audit findings.</span></li>

<li><span data-contrast="auto">Own the post-acquisition compliance integration playbook: gap analysis, remediation roadmap, and timeline to bring acquired entities under the Avandra compliance umbrella.</span></li>

<li><span data-contrast="auto">Assess and rationalize subsidiary compliance programs; identify redundancies, coverage gaps, and certification consolidation opportunities.</span></li>

<li><span data-contrast="auto">Serve as the compliance integration contributor in cross-functional M&A workstreams alongside Legal, Finance, and Engineering.</span><span data-ccp-props="{"335559739":80}"> </span></li>

<li><span data-contrast="auto">Maintain a consolidated compliance posture across all entities — ensuring no subsidiary operates outside Avandra's policy and control framework.</span></li>

</ul>

<p><strong><span data-contrast="none">Training & Culture</span></strong><span data-ccp-props="{"335559738":200,"335559739":80}"> </span></p>

<ul>

<li><span data-contrast="auto">Develop and deliver company-wide compliance training, including onboarding programs tailored to acquired teams.</span></li>

<li><span data-contrast="auto">Translate complex regulatory requirements into clear, actionable guidance for non-compliance teams.</span></li>

</ul>

<h3><strong>What You’ll Need</strong></h3>

<p><strong><span data-contrast="none">Required</span></strong><span data-ccp-props="{"335559738":200,"335559739":80}"> </span></p>

<ul>

<li><span data-contrast="auto">5+ years of hands-on compliance experience at a B2B SaaS or healthcare technology company.</span></li>

<li><span data-contrast="auto">Demonstrated ownership of HIPAA compliance programs; working knowledge of HITRUST (i1 or r2).</span><span data-ccp-props="{"335559739":80}"> </span></li>

<li><span data-contrast="auto">SOC 2 Type II experience — you've coordinated evidence, managed auditors, and closed gaps.</span><span data-ccp-props="{"335559739":80}"> </span></li>

<li><span data-contrast="auto">Ability to work cross-functionally with Engineering on technical controls without needing a translator.</span><span data-ccp-props="{"335559739":80}"> </span></li>

<li><span data-contrast="auto">Strong written communication — policy writing, questionnaire responses, and executive summaries are all in your wheelhouse.</span><span data-ccp-props="{"335559739":80}"> </span></li>

<li><span data-contrast="auto">Self-starter mentality; you build structure in ambiguity.</span></li>

</ul>

<p><strong><span data-contrast="none">Preferred</span></strong><span data-ccp-props="{"335559738":200,"335559739":80}"> </span></p>

<ul>

<li><span data-contrast="auto">Experience supporting compliance assessments or integration work in M&A contexts.</span></li>

<li><span data-contrast="auto">Familiarity with multi-entity or subsidiary compliance program management.</span></li>

<li><span data-contrast="auto">CISSP, CISM, HCISPP, or equivalent certification.</span></li>

<li><span data-contrast="auto">Experience with compliance automation tooling (Vanta, Drata, Tugboat Logic, etc.).</span></li>

<li><span data-contrast="auto">Familiarity with PHI data flows, health data integrations, and healthcare data contracts.</span></li>

<li><span data-contrast="auto">Prior experience at a growth-stage startup where the compliance program was being created, not inherited.</span></li>

</ul>

<h3><strong>What We Offer</strong></h3>

<ul>

<li><strong>Meaningful Impact: </strong>The work we do directly enables medical breakthroughs — such as earlier cancer detection, better Alzheimer's treatments, AI diagnostics that save lives. This isn't abstract; it's the reason our health system partners invest in us.</li>

<li><strong>Career-Defining Opportunity: </strong>You'll have a front-row seat to every aspect of building a category-defining company—strategy, operations, fundraising, M&A, scaling.</li>

<li><strong>Exceptional Team: </strong>Work alongside a founder with a track record of building and exiting healthcare technology companies, backed by investors who are true partners.</li>

<li><strong>Competitive Package: </strong>Competitive salary, equity, comprehensive benefits, and hybrid work flexibility.</li>

<li><strong>Values-Driven Culture:</strong> We’re building a team grounded in Avandra’s 5 Core Values that guide how we show up every day:<br>

<ul>

<li>WIN with Integrity</li>

<li>Radical Accountability</li>

<li>Engage with Empathy</li>

<li>Innovation Through Playful Curiosity</li>

<li>Patients First</li>

</ul>

</li>

</ul><div class="content-conclusion"><hr>

<p><span style="font-weight: 400;"><strong>Aegis Ventures is a proud Equal Opportunity Employer</strong> — we recruit, train, compensate and promote our team members based on qualifications. We encourage you to apply regardless of your race, religion, national origin, sex, gender identity, sexual orientation, disability, age, veteran status, or any other applicable legally protected characteristics.</span></p></div>